last executing test programs: 2m19.736884443s ago: executing program 3 (id=569): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) 2m19.660897658s ago: executing program 3 (id=571): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2m19.565947216s ago: executing program 3 (id=576): ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) 2m19.54563519s ago: executing program 3 (id=578): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_ATM={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x7}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xfd4b}]}}]}, 0x5c}}, 0x0) 2m19.487737363s ago: executing program 3 (id=581): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) 2m19.464258337s ago: executing program 3 (id=584): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2m15.722709574s ago: executing program 32 (id=711): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x8}]}}]}, 0x48}}, 0x1040) 2m11.364689264s ago: executing program 33 (id=265): unshare(0x2c020600) r0 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0xc00) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x1000, 0x10ffef, 0xfefffffa}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x37) 2m5.554829626s ago: executing program 6 (id=937): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x6, 0x2b, 0x0, 0x20000000) 2m5.396132786s ago: executing program 6 (id=943): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$TCFLSH(r0, 0x8910, 0xfffffffdfffffffb) 2m5.233231147s ago: executing program 6 (id=947): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x00\x00 '], 0x20) 2m5.167486884s ago: executing program 6 (id=950): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2000444, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m5.043743026s ago: executing program 6 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="08005a80040702800a0018"], 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 2m4.641100048s ago: executing program 6 (id=964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0xd132}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x6}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9601"], 0x6e8a) 2m4.560457529s ago: executing program 34 (id=964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0xd132}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x6}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9601"], 0x6e8a) 2m4.430359767s ago: executing program 35 (id=584): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2m4.272913527s ago: executing program 1 (id=977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000740), 0x800000, r0}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m4.242974422s ago: executing program 1 (id=978): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x28242, 0x81) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 2m4.151078545s ago: executing program 1 (id=981): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x400, 0x112}, 0x8) 2m4.044704679s ago: executing program 1 (id=984): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x95e, &(0x7f0000000280)={[{@data_err_ignore}, {@nodelalloc}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}, {@grpid}, {@oldalloc}]}, 0x3, 0x44d, &(0x7f0000000ec0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m3.947337323s ago: executing program 1 (id=988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="5800000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f72740000000c00078008000840833c6895"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2m3.552354535s ago: executing program 1 (id=998): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080), 0xfc, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0xffffffffffffffff, 0x2) getdents64(r0, 0x0, 0x0) 2m3.503893498s ago: executing program 36 (id=998): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080), 0xfc, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0xffffffffffffffff, 0x2) getdents64(r0, 0x0, 0x0) 1m5.393165394s ago: executing program 2 (id=1759): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000400)='l3', 0x2}], 0x3}], 0x1, 0x0) 1m5.30156658s ago: executing program 2 (id=1762): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0x7, 0x12) 1m5.204831149s ago: executing program 2 (id=1765): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='wwnn=+x3333333333333333', 0x17) 1m5.111464483s ago: executing program 2 (id=1768): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000480)={[{@noblock_validity}, {@oldalloc}, {@orlov}, {@quota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 1m4.909885024s ago: executing program 2 (id=1774): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 1m4.162453574s ago: executing program 2 (id=1794): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 1m3.95483949s ago: executing program 37 (id=1794): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 32.137876078s ago: executing program 8 (id=2174): unshare(0xa020480) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x65, 0x0) 32.016300746s ago: executing program 8 (id=2178): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r0) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x45) 31.880733844s ago: executing program 8 (id=2181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7}, {0x10}, {0x8, 0x7}, {0x34, 0x7}, {0x0, 0x2}, {0x81, 0x3}], "3829b70b8285e8c2"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 31.735715132s ago: executing program 8 (id=2185): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 31.428380703s ago: executing program 8 (id=2191): r0 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 31.163470934s ago: executing program 8 (id=2195): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000802000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 30.974191984s ago: executing program 38 (id=2195): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000802000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 2.494855801s ago: executing program 4 (id=2593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x100000d7}, 0x4000084) 2.328344217s ago: executing program 4 (id=2598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x30, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}]]}, 0x30}, 0x1, 0x0, 0x0, 0x6000064}, 0x0) 2.22437266s ago: executing program 4 (id=2602): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 1.956303739s ago: executing program 4 (id=2606): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x34}}, 0x800) 1.850131023s ago: executing program 4 (id=2610): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x7f}, 0x2) 1.611738276s ago: executing program 7 (id=2614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.361738359s ago: executing program 7 (id=2620): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="44bb985ae9") 1.276336824s ago: executing program 5 (id=2622): unshare(0x22020400) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x10000, @empty, 0xfffffffb}, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x48004) syz_clone3(&(0x7f00000003c0)={0x2020000, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) signalfd4(r0, &(0x7f0000000340)={[0x1]}, 0x8, 0x80000) 1.240428021s ago: executing program 7 (id=2623): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r1, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="8c", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0), 0xa4}], 0x1, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x841}}], 0x2, 0x11) socket$unix(0x1, 0x1, 0x0) 1.159937956s ago: executing program 5 (id=2626): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) 1.094837206s ago: executing program 7 (id=2627): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/216, 0xd8}, {&(0x7f0000000200)=""/129, 0x81}], 0x2, 0x6, 0xfffeeffa) 988.41567ms ago: executing program 5 (id=2629): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) 957.275852ms ago: executing program 7 (id=2630): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) sendmmsg$inet6(r0, &(0x7f0000001d00)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) 886.062296ms ago: executing program 5 (id=2631): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='common_pid > 0&', 0xf) 776.549526ms ago: executing program 5 (id=2634): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) setxattr$smack_xattr_label(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)={'lowerdir'}, 0x9, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) 670.533754ms ago: executing program 5 (id=2637): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0x0, 0x1, 0x7}) 620.472757ms ago: executing program 0 (id=2638): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 528.17167ms ago: executing program 9 (id=2639): unshare(0x60600) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x199, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x2, 0x9}) mq_timedreceive(r0, &(0x7f0000001140)=""/170, 0xaa, 0x5, 0x0) 527.904226ms ago: executing program 0 (id=2640): syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r1, 0x1, &(0x7f00000011c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f00000000c0)=' ', 0x1, 0xe3}]) 481.691831ms ago: executing program 9 (id=2641): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='((\'v\'', 0x5) 411.798861ms ago: executing program 9 (id=2642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) 300.329662ms ago: executing program 9 (id=2643): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 255.825387ms ago: executing program 9 (id=2644): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) 225.821214ms ago: executing program 0 (id=2645): r0 = syz_io_uring_setup(0xfba, &(0x7f0000000400)={0x0, 0xfffffffd, 0x100, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x48, 0x0, 0x0, 0x0, 0x12345, 0x0, {}, 0x0, {0x0, r4}}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 136.303246ms ago: executing program 0 (id=2646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 136.051718ms ago: executing program 9 (id=2647): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) ioctl(r0, 0x4e44, 0x0) 119.466261ms ago: executing program 0 (id=2648): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='rd', 0x2) 46.559611ms ago: executing program 7 (id=2649): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, 0xffffffffffffffff) 421.729µs ago: executing program 0 (id=2650): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xfc}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r1, {0xe, 0x1}}}, 0x24}}, 0x4) 0s ago: executing program 4 (id=2651): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000300)='\x8f\xed\'[\t:1]:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='::1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): or report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.680291][ T6663] EXT4-fs warning (device loop6): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 55.763237][ T6944] tipc: Enabling of bearer rejected, already enabled [ 55.890236][ T6957] loop1: detected capacity change from 0 to 128 [ 55.998547][ T6967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.865'. [ 56.027532][ T4713] Bluetooth: hci4: command tx timeout [ 56.149095][ T6992] loop5: detected capacity change from 0 to 2048 [ 56.267121][ T4713] Bluetooth: hci5: command tx timeout [ 56.335392][ T7018] loop5: detected capacity change from 0 to 512 [ 56.336813][ T7018] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 56.341395][ T7018] EXT4-fs (loop5): invalid journal inode [ 56.341654][ T7018] EXT4-fs (loop5): can't get journal size [ 56.345320][ T7018] EXT4-fs (loop5): 1 truncate cleaned up [ 56.969339][ T7110] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 57.177320][ T7130] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 57.405468][ T4713] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 57.410110][ T4713] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:200' [ 57.410969][ T4713] CPU: 1 UID: 0 PID: 4713 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT [ 57.410987][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 57.410993][ T4713] Workqueue: hci5 hci_rx_work [ 57.411014][ T4713] Call trace: [ 57.411018][ T4713] show_stack+0x2c/0x3c (C) [ 57.411044][ T4713] __dump_stack+0x30/0x40 [ 57.411058][ T4713] dump_stack_lvl+0xd8/0x12c [ 57.411071][ T4713] dump_stack+0x1c/0x28 [ 57.411083][ T4713] sysfs_warn_dup+0x9c/0xb8 [ 57.411097][ T4713] sysfs_create_dir_ns+0x190/0x1f4 [ 57.411109][ T4713] kobject_add_internal+0x290/0x6f0 [ 57.411122][ T4713] kobject_add_varg+0x9c/0xe8 [ 57.411133][ T4713] kobject_add+0x110/0x1c8 [ 57.411143][ T4713] device_add+0x394/0x9e0 [ 57.411153][ T4713] hci_conn_add_sysfs+0xbc/0x1e8 [ 57.411162][ T4713] hci_conn_complete_evt+0x6ec/0xe04 [ 57.411175][ T4713] hci_event_packet+0x4e0/0x9c8 [ 57.411188][ T4713] hci_rx_work+0x2f4/0xd78 [ 57.411198][ T4713] process_scheduled_works+0x91c/0x1250 [ 57.411209][ T4713] worker_thread+0x798/0xbd0 [ 57.411219][ T4713] kthread+0x304/0x3d4 [ 57.411228][ T4713] ret_from_fork+0x10/0x20 [ 57.411246][ T4713] kobject: kobject_add_internal failed for hci5:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 57.411264][ T4713] Bluetooth: hci5: failed to register connection device [ 57.577934][ T7165] nvme_fcloop: unknown parameter or missing value 'w' [ 57.693166][ T7172] loop5: detected capacity change from 0 to 512 [ 57.709795][ T7172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.762385][ T7172] EXT4-fs error (device loop5): ext4_readdir:280: inode #2: block 3: comm syz.5.930: path /57/bus: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=4, size=2048 fake=0 [ 57.843618][ T7185] loop5: detected capacity change from 0 to 512 [ 57.854227][ T7185] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 57.867833][ T7185] EXT4-fs (loop5): 1 truncate cleaned up [ 57.882252][ T7185] EXT4-fs error (device loop5): __ext4_add_entry:2414: inode #2: comm syz.5.934: Directory hole found for htree leaf block 0 [ 57.887049][ T7185] EXT4-fs (loop5): Remounting filesystem read-only [ 57.980106][ T7196] loop2: detected capacity change from 0 to 512 [ 58.059447][ T7196] EXT4-fs warning (device loop2): ext4_group_add:1715: Can't resize non-sparse filesystem further [ 58.269360][ T7218] loop6: detected capacity change from 0 to 512 [ 58.285607][ T7218] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.950: bg 0: block 5: invalid block bitmap [ 58.285641][ T7218] loop6: lost filesystem error report for type 5 error -117 [ 58.288291][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 58.288301][ C0] EXT4-fs (loop6): initial error at time 58: ext4_validate_block_bitmap:436 [ 58.288313][ C0] EXT4-fs (loop6): last error at time 58: ext4_validate_block_bitmap:436 [ 58.295857][ T7218] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 58.295884][ T7218] loop6: lost filesystem error report for type 5 error -117 [ 58.297856][ T7218] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.950: invalid indirect mapped block 3 (level 2) [ 58.297886][ T7218] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.301759][ T7218] EXT4-fs (loop6): 1 orphan inode deleted [ 58.301778][ T7218] EXT4-fs (loop6): 1 truncate cleaned up [ 58.322170][ T7218] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 58.347320][ T4718] Bluetooth: hci5: command tx timeout [ 58.364158][ T6663] EXT4-fs error (device loop6): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 58.370239][ T6663] EXT4-fs error (device loop6): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 58.494829][ T7234] loop5: detected capacity change from 0 to 512 [ 58.771869][ T7248] tun0: tun_chr_ioctl cmd 1074025677 [ 58.771978][ T7248] tun0: linktype set to 1 [ 58.922955][ T4713] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 58.925122][ T4713] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 58.930096][ T4713] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 58.932087][ T4713] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 58.932527][ T7257] pimreg: tun_chr_ioctl cmd 2147767520 [ 58.934275][ T4713] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 59.003955][ T2991] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.096721][ T4718] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 59.098992][ T4718] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 59.100613][ T4718] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 59.103843][ T4718] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 59.105545][ T4718] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 59.119689][ T7081] IPVS: starting estimator thread 0... [ 59.160326][ T2991] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.198788][ T7292] loop1: detected capacity change from 0 to 1024 [ 59.207328][ T7283] IPVS: using max 59 ests per chain, 141600 per kthread [ 59.220108][ T7292] EXT4-fs error (device loop1): ext4_free_blocks:6719: comm syz.1.978: Freeing blocks not in datazone - block = 0, count = 16 [ 59.296829][ T2991] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.376346][ T7321] loop1: detected capacity change from 0 to 512 [ 59.379250][ T7321] EXT4-fs: Ignoring removed oldalloc option [ 59.392363][ T7321] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.416283][ T7321] EXT4-fs (loop1): 1 orphan inode deleted [ 59.416313][ T7321] EXT4-fs (loop1): 1 truncate cleaned up [ 59.428471][ T7321] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 59.430071][ T7321] overlayfs: failed to verify upper root origin [ 59.440139][ T2991] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.463511][ T7258] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.465163][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.465260][ T7258] bridge_slave_0: entered allmulticast mode [ 59.465711][ T7258] bridge_slave_0: entered promiscuous mode [ 59.466453][ T7258] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.466480][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.466539][ T7258] bridge_slave_1: entered allmulticast mode [ 59.469334][ T4715] EXT4-fs warning (device loop1): ext4_rmdir:3194: inode #17: comm syz-executor: empty directory 'file.cold' has too many links (0) [ 59.469459][ T4715] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 59.469740][ T4715] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 59.475200][ T7258] bridge_slave_1: entered promiscuous mode [ 59.496182][ T7258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.499282][ T7258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.530959][ T7258] team0: Port device team_slave_0 added [ 59.532207][ T7258] team0: Port device team_slave_1 added [ 59.540310][ T7276] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.542036][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.543585][ T7276] bridge_slave_0: entered allmulticast mode [ 59.545243][ T7276] bridge_slave_0: entered promiscuous mode [ 59.552009][ T7258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.553687][ T7258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.558956][ T7258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.561832][ T7258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.564276][ T7258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.569582][ T7258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.577079][ T7276] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.577134][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.577234][ T7276] bridge_slave_1: entered allmulticast mode [ 59.577727][ T7276] bridge_slave_1: entered promiscuous mode [ 59.606140][ T7276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.613453][ T7276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.650386][ T2991] bridge_slave_1: left allmulticast mode [ 59.650424][ T2991] bridge_slave_1: left promiscuous mode [ 59.650502][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.653169][ T2991] bridge_slave_0: left allmulticast mode [ 59.653182][ T2991] bridge_slave_0: left promiscuous mode [ 59.653246][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.734443][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.759414][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.780359][ T7351] loop2: detected capacity change from 0 to 128 [ 59.789594][ T7351] fscrypt (loop2, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 59.792914][ T2991] bond0 (unregistering): Released all slaves [ 59.809023][ T7258] hsr_slave_0: entered promiscuous mode [ 59.810801][ T7258] hsr_slave_1: entered promiscuous mode [ 59.815630][ T7258] debugfs: 'hsr0' already exists in 'hsr' [ 59.815660][ T7258] Cannot create hsr debugfs directory [ 59.829739][ T7276] team0: Port device team_slave_0 added [ 59.830602][ T7276] team0: Port device team_slave_1 added [ 59.872015][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.872049][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.872075][ T7276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.937388][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.937421][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.937450][ T7276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.964362][ T4713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.965493][ T4713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.966083][ T4713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.966423][ T4713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.967103][ T4713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.015876][ T7276] hsr_slave_0: entered promiscuous mode [ 60.018804][ T7276] hsr_slave_1: entered promiscuous mode [ 60.020440][ T7276] debugfs: 'hsr0' already exists in 'hsr' [ 60.021762][ T7276] Cannot create hsr debugfs directory [ 60.150889][ T2991] hsr_slave_0: left promiscuous mode [ 60.152436][ T2991] hsr_slave_1: left promiscuous mode [ 60.153990][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.154015][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.158640][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.158664][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.169175][ T2991] veth1_macvtap: left promiscuous mode [ 60.169222][ T2991] veth0_macvtap: left promiscuous mode [ 60.169280][ T2991] veth1_vlan: left promiscuous mode [ 60.169320][ T2991] veth0_vlan: left promiscuous mode [ 60.280009][ T2991] team0 (unregistering): Port device team_slave_1 removed [ 60.286305][ T2991] team0 (unregistering): Port device team_slave_0 removed [ 60.362192][ T4397] 8021q: adding VLAN 0 to HW filter on device eth4 [ 60.466736][ T7258] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 60.471944][ T7258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.473902][ T7258] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 60.484405][ T7258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.487950][ T7258] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 60.490399][ T7258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.518559][ T7258] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 60.521174][ T7258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.564123][ T7276] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 60.574233][ T7276] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.580452][ T7276] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 60.583299][ T7276] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.588859][ T7276] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 60.592838][ T7276] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.598993][ T7276] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 60.604358][ T7276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.625905][ T2991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.686898][ T4397] 8021q: adding VLAN 0 to HW filter on device eth5 [ 60.732549][ T2991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.747604][ T7258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.776592][ T7258] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.778883][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.778964][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.779043][ T7358] bridge_slave_0: entered allmulticast mode [ 60.781789][ T7358] bridge_slave_0: entered promiscuous mode [ 60.782673][ T7358] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.782695][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.782748][ T7358] bridge_slave_1: entered allmulticast mode [ 60.783186][ T7358] bridge_slave_1: entered promiscuous mode [ 60.803009][ T2991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.813221][ T7358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.814220][ T7358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.841667][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.841711][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.843576][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.843601][ T7081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.854521][ T7358] team0: Port device team_slave_0 added [ 60.858670][ T7276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.864857][ T7358] team0: Port device team_slave_1 added [ 60.898082][ T2991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.906332][ T7276] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.908492][ T7358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.908503][ T7358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.908514][ T7358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.912570][ T7358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.912584][ T7358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.912598][ T7358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.925013][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.925048][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.943645][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.943695][ T7081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.962520][ T7358] hsr_slave_0: entered promiscuous mode [ 60.963074][ T7358] hsr_slave_1: entered promiscuous mode [ 60.964900][ T7358] debugfs: 'hsr0' already exists in 'hsr' [ 60.964914][ T7358] Cannot create hsr debugfs directory [ 60.987848][ T4718] Bluetooth: hci5: command tx timeout [ 61.135647][ T2991] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.141465][ T4397] 8021q: adding VLAN 0 to HW filter on device eth6 [ 61.148791][ T4718] Bluetooth: hci6: command tx timeout [ 61.176641][ T7358] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 61.182135][ T7358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.186348][ T7358] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 61.189580][ T7358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.189913][ T7358] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 61.193187][ T7358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.208116][ T2991] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.211305][ T7358] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 61.215360][ T7358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.282315][ T2991] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.328070][ T7358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.333379][ T7358] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.336299][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.336344][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.350186][ T2991] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.353912][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.353957][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.469158][ T2991] bridge_slave_1: left allmulticast mode [ 61.469202][ T2991] bridge_slave_1: left promiscuous mode [ 61.469293][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.474399][ T2991] bridge_slave_0: left allmulticast mode [ 61.474423][ T2991] bridge_slave_0: left promiscuous mode [ 61.474766][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.481648][ T2991] bridge_slave_1: left allmulticast mode [ 61.481675][ T2991] bridge_slave_1: left promiscuous mode [ 61.481740][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.484293][ T2991] bridge_slave_0: left allmulticast mode [ 61.484307][ T2991] bridge_slave_0: left promiscuous mode [ 61.484365][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.563994][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.568921][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.588008][ T2991] bond0 (unregistering): Released all slaves [ 61.625454][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.648258][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.667889][ T2991] bond0 (unregistering): Released all slaves [ 61.731176][ T2991] tipc: Disabling bearer [ 61.732182][ T2991] tipc: Left network mode [ 62.027070][ T4718] Bluetooth: hci0: command tx timeout [ 62.173121][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.173151][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.176709][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.176735][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.181964][ T2991] hsr_slave_0: left promiscuous mode [ 62.183044][ T2991] hsr_slave_1: left promiscuous mode [ 62.183311][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.183322][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.185022][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.185041][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.195511][ T2991] hsr0: left allmulticast mode [ 62.195622][ T2991] veth1_macvtap: left promiscuous mode [ 62.195641][ T2991] veth0_macvtap: left promiscuous mode [ 62.195713][ T2991] veth1_vlan: left promiscuous mode [ 62.195746][ T2991] veth0_vlan: left promiscuous mode [ 62.200766][ T2991] veth1_macvtap: left promiscuous mode [ 62.200807][ T2991] veth0_macvtap: left promiscuous mode [ 62.200865][ T2991] veth1_vlan: left promiscuous mode [ 62.200898][ T2991] veth0_vlan: left promiscuous mode [ 62.344812][ T2991] team0 (unregistering): Port device team_slave_1 removed [ 62.353309][ T2991] team0 (unregistering): Port device team_slave_0 removed [ 62.460975][ T2991] team0 (unregistering): Port device team_slave_1 removed [ 62.464827][ T2991] team0 (unregistering): Port device team_slave_0 removed [ 62.910879][ T2991] IPVS: stop unused estimator thread 0... [ 63.067862][ T4718] Bluetooth: hci5: command tx timeout [ 63.229789][ T4718] Bluetooth: hci6: command tx timeout [ 63.868420][ T4384] block nbd0: Possible stuck request 00000000aebb1899: control (read@0,4096B). Runtime 30 seconds [ 64.107718][ T4718] Bluetooth: hci0: command tx timeout [ 64.508885][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.508943][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.512642][ T26] cfg80211: failed to load regulatory.db [ 65.147435][ T4718] Bluetooth: hci5: command tx timeout [ 65.307004][ T4718] Bluetooth: hci6: command tx timeout [ 66.187237][ T4718] Bluetooth: hci0: command tx timeout [ 66.355617][ T7276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.391964][ T7258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.528478][ T4397] 8021q: adding VLAN 0 to HW filter on device eth7 [ 66.530234][ T7276] veth0_vlan: entered promiscuous mode [ 66.533739][ T7276] veth1_vlan: entered promiscuous mode [ 66.561083][ T7258] veth0_vlan: entered promiscuous mode [ 66.568988][ T7258] veth1_vlan: entered promiscuous mode [ 66.582809][ T7358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.590792][ T7276] veth0_macvtap: entered promiscuous mode [ 66.595254][ T7276] veth1_macvtap: entered promiscuous mode [ 66.615790][ T7258] veth0_macvtap: entered promiscuous mode [ 66.619867][ T7258] veth1_macvtap: entered promiscuous mode [ 66.622774][ T7276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.629140][ T7276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.636629][ T7258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.651808][ T7258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.658582][ T40] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.659009][ T40] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.712773][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.712801][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.720786][ T7084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.720820][ T7084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.727316][ T58] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.728035][ T58] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.728065][ T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.728087][ T58] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.728107][ T58] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.728126][ T58] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.761835][ T7081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.761866][ T7081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.781324][ T7081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.781353][ T7081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.819092][ T7358] veth0_vlan: entered promiscuous mode [ 66.824462][ T7358] veth1_vlan: entered promiscuous mode [ 66.866475][ T7358] veth0_macvtap: entered promiscuous mode [ 66.867774][ T7358] veth1_macvtap: entered promiscuous mode [ 66.871060][ T7358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.872086][ T7358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.877562][ T7081] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.878087][ T7081] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.878167][ T7081] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.878229][ T7081] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.900738][ T7571] loop8: detected capacity change from 0 to 512 [ 66.914497][ T7571] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 66.933467][ T7571] EXT4-fs (loop8): 1 truncate cleaned up [ 66.935563][ T7571] EXT4-fs mount: 44 callbacks suppressed [ 66.938743][ T7571] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.981320][ T7081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.983067][ T7081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.009141][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.009172][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.043084][ T7276] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.226698][ T7615] netlink: 'syz.8.1039': attribute type 1 has an invalid length. [ 67.237829][ T4718] Bluetooth: hci5: command tx timeout [ 67.254143][ T4397] 8021q: adding VLAN 0 to HW filter on device eth8 [ 67.327651][ T7633] loop8: detected capacity change from 0 to 128 [ 67.341844][ T7633] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.388898][ T4718] Bluetooth: hci6: command tx timeout [ 67.414220][ T7645] loop7: detected capacity change from 0 to 128 [ 67.428607][ T7645] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.513624][ T7276] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.520980][ T7258] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.530027][ T4397] 8021q: adding VLAN 0 to HW filter on device eth9 [ 67.692831][ T7676] loop7: detected capacity change from 0 to 512 [ 67.752095][ T7676] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.854158][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.872968][ T7698] Injecting memory failure for pfn 0x11e467 at process virtual address 0x20000000 [ 67.880999][ T7698] Memory failure: 0x11e467: Sending SIGBUS to syz.8.1065:7698 due to hardware memory corruption [ 67.883283][ T7698] Memory failure: 0x11e467: recovery action for dirty LRU page: Recovered [ 67.884964][ T7698] Injecting memory failure for pfn 0x2190ff at process virtual address 0x20001000 [ 67.886882][ T7698] Memory failure: 0x2190ff: Sending SIGBUS to syz.8.1065:7698 due to hardware memory corruption [ 67.889677][ T7698] Memory failure: 0x2190ff: recovery action for already poisoned page: Failed [ 67.925127][ T7700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 67.930518][ T7700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 67.930576][ T7700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 67.930605][ T7700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 67.930630][ T7700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 67.930653][ T7700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 67.930677][ T7700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 67.930706][ T7700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 67.930728][ T7700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 67.930750][ T7700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 68.030800][ T4397] 8021q: adding VLAN 0 to HW filter on device eth10 [ 68.140734][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1073'. [ 68.178466][ T4397] 8021q: adding VLAN 0 to HW filter on device eth11 [ 68.311850][ T4718] Bluetooth: hci0: command tx timeout [ 68.518855][ T7755] netlink: 'syz.8.1076': attribute type 2 has an invalid length. [ 68.520590][ T7755] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1076'. [ 68.614937][ T7762] loop2: detected capacity change from 0 to 128 [ 68.634616][ T7762] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.730289][ T7762] fscrypt (loop2, inode 12): Mutually exclusive encryption flags (0x15) [ 68.810880][ T4707] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.874144][ T4397] 8021q: adding VLAN 0 to HW filter on device eth12 [ 69.028997][ T7787] bonding: bond0 is being deleted... [ 76.330207][ T7702] psci: CPU1 killed (polled 0 ms) [ 76.349804][ T7787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.363281][ T7787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.368601][ T7787] bond0 (unregistering): Released all slaves [ 81.573394][ T7841] loop2: detected capacity change from 0 to 512 [ 81.589848][ T7837] loop7: detected capacity change from 0 to 512 [ 81.598185][ T7837] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm syz.7.1103: bg 0: block 5: invalid block bitmap [ 81.601195][ T7837] loop7: lost filesystem error report for type 5 error -117 [ 81.604966][ T7837] EXT4-fs (loop7): Remounting filesystem read-only [ 81.608053][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 81.608065][ C0] EXT4-fs (loop7): initial error at time 81: ext4_validate_block_bitmap:436 [ 81.608077][ C0] EXT4-fs (loop7): last error at time 81: ext4_validate_block_bitmap:436 [ 81.613353][ T7837] EXT4-fs (loop7): 2 truncates cleaned up [ 81.615209][ T7837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.619548][ T7841] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.1101: iget: bad extended attribute block 134217728 [ 81.622951][ T7841] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.627033][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 81.627057][ C0] EXT4-fs (loop2): initial error at time 81: ext4_orphan_get:1403: inode 15 [ 81.627091][ C0] EXT4-fs (loop2): last error at time 81: ext4_orphan_get:1403: inode 15 [ 81.634107][ T7841] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1101: couldn't read orphan inode 15 (err -117) [ 81.634126][ T7841] loop2: lost filesystem error report for type 5 error -117 [ 81.638361][ T7841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.769761][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.794414][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.813870][ T7084] IPVS: starting estimator thread 0... [ 81.908882][ T7855] IPVS: using max 58 ests per chain, 139200 per kthread [ 82.022442][ T7872] alloc_netdev: Unable to allocate device with zero queues [ 82.258754][ T7887] loop2: detected capacity change from 0 to 512 [ 82.264913][ T7887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.268792][ T7887] EXT4-fs: Ignoring removed nobh option [ 82.270046][ T7887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.271354][ T7887] EXT4-fs: Ignoring removed bh option [ 82.291455][ T7887] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 82.296959][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 82.296987][ C0] EXT4-fs (loop2): initial error at time 82: ext4_mb_generate_buddy:1317 [ 82.297021][ C0] EXT4-fs (loop2): last error at time 82: ext4_mb_generate_buddy:1317 [ 82.313440][ T7887] EXT4-fs (loop2): 1 orphan inode deleted [ 82.315251][ T7887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.441831][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.226429][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1139'. [ 83.313622][ T7956] loop2: detected capacity change from 0 to 1024 [ 83.318686][ T7956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.360822][ T7956] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 83.370103][ T7956] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 83.374120][ T7956] EXT4-fs (loop2): This should not happen!! Data will be lost [ 83.374120][ T7956] [ 83.374166][ T7956] EXT4-fs (loop2): Total free blocks count 0 [ 83.374183][ T7956] EXT4-fs (loop2): Free/Dirty block details [ 83.374201][ T7956] EXT4-fs (loop2): free_blocks=68451041280 [ 83.374250][ T7956] EXT4-fs (loop2): dirty_blocks=64 [ 83.374288][ T7956] EXT4-fs (loop2): Block reservation details [ 83.374306][ T7956] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 83.403422][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1143'. [ 83.403487][ T7963] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1143'. [ 83.473556][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.852383][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1153'. [ 83.852417][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1153'. [ 84.029093][ T4397] 8021q: adding VLAN 0 to HW filter on device eth13 [ 84.224900][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'. [ 84.853981][ T4397] 8021q: adding VLAN 0 to HW filter on device eth14 [ 85.611921][ T4397] 8021q: adding VLAN 0 to HW filter on device eth15 [ 85.752449][ T7872] netdevsim netdevsim10: probe with driver netdevsim failed with error -12 [ 85.956785][ T8112] loop8: detected capacity change from 0 to 4096 [ 85.984846][ T8112] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.079704][ T8125] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 86.082280][ T8125] CPU: 0 UID: 0 PID: 8125 Comm: syz.9.1196 Not tainted syzkaller #0 PREEMPT [ 86.082305][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 86.082312][ T8125] Call trace: [ 86.082316][ T8125] show_stack+0x2c/0x3c (C) [ 86.082340][ T8125] __dump_stack+0x30/0x40 [ 86.082357][ T8125] dump_stack_lvl+0xd8/0x12c [ 86.082369][ T8125] dump_stack+0x1c/0x28 [ 86.082381][ T8125] sysfs_warn_dup+0x9c/0xb8 [ 86.082394][ T8125] sysfs_create_dir_ns+0x190/0x1f4 [ 86.082406][ T8125] kobject_add_internal+0x290/0x6f0 [ 86.082418][ T8125] kobject_add_varg+0x9c/0xe8 [ 86.082429][ T8125] kobject_add+0x110/0x1c8 [ 86.082440][ T8125] device_add+0x394/0x9e0 [ 86.082449][ T8125] device_register+0x28/0x38 [ 86.082457][ T8125] tty_register_device_attr+0x31c/0x5e8 [ 86.082467][ T8125] tty_register_device+0x3c/0x50 [ 86.082475][ T8125] gsm_activate_mux+0xdc/0x284 [ 86.082486][ T8125] gsmld_ioctl+0x9d0/0x1414 [ 86.082494][ T8125] tty_ioctl+0x8a8/0xcb0 [ 86.082502][ T8125] __arm64_sys_ioctl+0x154/0x1cc [ 86.082515][ T8125] invoke_syscall+0x98/0x244 [ 86.082527][ T8125] el0_svc_common+0xec/0x23c [ 86.082538][ T8125] do_el0_svc+0x4c/0x5c [ 86.082549][ T8125] el0_svc+0x64/0x260 [ 86.082558][ T8125] el0t_64_sync_handler+0x44/0x104 [ 86.082568][ T8125] el0t_64_sync+0x198/0x19c [ 86.117033][ T8125] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 86.122333][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.136855][ T7276] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.362702][ T8136] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1202'. [ 86.588553][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.590889][ T8147] bridge_slave_1: left allmulticast mode [ 86.596529][ T8147] bridge_slave_1: left promiscuous mode [ 86.603539][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.621427][ T8147] net_ratelimit: 3320 callbacks suppressed [ 86.621466][ T8147] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 87.071107][ T8181] pimreg: entered allmulticast mode [ 87.094579][ T8181] pimreg: left allmulticast mode [ 87.300129][ T8201] loop7: detected capacity change from 0 to 512 [ 87.312495][ T8195] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 87.322277][ T8201] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 87.328687][ T8201] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 87.328741][ T8201] System zones: 1-12 [ 87.331617][ T8201] EXT4-fs (loop7): 1 truncate cleaned up [ 87.332111][ T8201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.451486][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.474296][ T8205] loop2: detected capacity change from 0 to 512 [ 87.487919][ T8205] EXT4-fs: Ignoring removed bh option [ 87.501539][ T8205] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 87.504353][ T8205] EXT4-fs (loop2): 1 truncate cleaned up [ 87.504833][ T8205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.543150][ T8205] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.1230: bg 0: block 465: padding at end of block bitmap is not set [ 87.609505][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.978002][ T8250] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 88.094384][ T8263] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1253'. [ 88.641806][ T8306] ip_tables: iptables: counters copy to user failed while replacing table [ 88.873183][ T8322] Soft offlining pfn 0x13eb6e at process virtual address 0x2016e000 [ 89.078327][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1285'. [ 89.213192][ T8342] loop9: detected capacity change from 0 to 256 [ 89.272617][ T8342] FAT-fs (loop9): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 89.272654][ T8342] FAT-fs (loop9): Filesystem has been set read-only [ 89.337243][ T8345] netlink: 'syz.8.1292': attribute type 1 has an invalid length. [ 89.393374][ T8350] WARNING! power/level is deprecated; use power/control instead [ 89.499457][ T8360] loop9: detected capacity change from 0 to 512 [ 89.531727][ T8360] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.572144][ T8369] loop2: detected capacity change from 0 to 1024 [ 89.597601][ T8369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.601139][ T8371] sock: sock_timestamping_bind_phc: sock not bind to device [ 89.644701][ T8369] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.1300: bg 0: block 112: padding at end of block bitmap is not set [ 89.659472][ T8369] EXT4-fs (loop2): Remounting filesystem read-only [ 89.671804][ T8360] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 16: block 46:freeing already freed block (bit 46); block bitmap corrupt. [ 89.714105][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.717921][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1303'. [ 89.842334][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1307'. [ 89.842371][ T8383] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1307'. [ 89.879828][ T7358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.958501][ T8395] bridge0: port 2(syz_tun) entered blocking state [ 89.960697][ T8395] bridge0: port 2(syz_tun) entered disabled state [ 89.963150][ T8395] syz_tun: entered allmulticast mode [ 89.972495][ T8395] syz_tun: entered promiscuous mode [ 89.972702][ T8395] bridge0: port 2(syz_tun) entered blocking state [ 89.972787][ T8395] bridge0: port 2(syz_tun) entered forwarding state [ 90.244498][ T8416] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 90.250266][ T8416] vhci_hcd vhci_hcd.2: invalid port number 96 [ 90.250310][ T8416] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 90.329787][ T30] audit: type=1326 audit(602.290:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.7.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab792a8 code=0x7ffc0000 [ 90.341765][ T30] audit: type=1326 audit(602.300:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.7.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab792a8 code=0x7ffc0000 [ 90.355741][ T30] audit: type=1326 audit(602.310:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.7.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab792a8 code=0x7ffc0000 [ 90.362657][ T30] audit: type=1326 audit(602.330:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.7.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab792a8 code=0x7ffc0000 [ 90.368235][ T30] audit: type=1326 audit(602.330:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.7.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9ab792a8 code=0x7ffc0000 [ 90.375721][ T30] audit: type=1326 audit(602.330:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.7.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab792a8 code=0x7ffc0000 [ 90.375771][ T30] audit: type=1326 audit(602.330:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.7.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab792a8 code=0x7ffc0000 [ 90.398893][ T30] audit: type=1326 audit(602.360:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.7.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab792a8 code=0x7ffc0000 [ 90.398941][ T30] audit: type=1326 audit(602.360:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.7.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab792a8 code=0x7ffc0000 [ 90.410642][ T30] audit: type=1326 audit(602.380:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.7.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff9ab792a8 code=0x7ffc0000 [ 90.455742][ T8425] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 93.955667][ T4384] block nbd0: Possible stuck request 00000000aebb1899: control (read@0,4096B). Runtime 60 seconds [ 95.434728][ T4340] udevd[4340]: worker [4725] /devices/virtual/block/nbd0 is taking a long time [ 96.441803][ T8481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.444695][ T8481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.629636][ T8500] loop8: detected capacity change from 0 to 256 [ 96.750501][ T8504] loop7: detected capacity change from 0 to 4096 [ 96.762963][ T8504] EXT4-fs (loop7): Test dummy encryption mode enabled [ 96.767271][ T8504] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 96.767304][ T8504] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (64851!=55237) [ 96.767361][ T8504] EXT4-fs (loop7): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 96.776650][ T8504] EXT4-fs error (device loop7): __ext4_get_inode_loc:4916: comm syz.7.1360: Invalid inode table block 0 in block_group 0 [ 96.776693][ T8504] loop7: lost filesystem error report for type 5 error -117 [ 96.776821][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 96.776845][ C0] EXT4-fs (loop7): initial error at time 608: __ext4_get_inode_loc:4916 [ 96.776880][ C0] EXT4-fs (loop7): last error at time 608: __ext4_get_inode_loc:4916 [ 96.791687][ T8504] EXT4-fs (loop7): Remounting filesystem read-only [ 96.791758][ T8504] EXT4-fs (loop7): get root inode failed [ 96.791778][ T8504] EXT4-fs (loop7): mount failed [ 97.258046][ T8543] loop8: detected capacity change from 0 to 256 [ 97.263279][ T4792] kernel read not supported for file /vcs (pid: 4792 comm: kworker/0:4) [ 97.594564][ T8569] loop2: detected capacity change from 0 to 512 [ 97.615920][ T8569] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1383: bg 0: block 5: invalid block bitmap [ 97.615968][ T8569] loop2: lost filesystem error report for type 5 error -117 [ 97.618899][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 97.618918][ C0] EXT4-fs (loop2): initial error at time 609: ext4_validate_block_bitmap:436 [ 97.618935][ C0] EXT4-fs (loop2): last error at time 609: ext4_validate_block_bitmap:436 [ 97.619616][ T8569] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 97.619632][ T8569] loop2: lost filesystem error report for type 5 error -117 [ 97.635331][ T8569] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1383: invalid indirect mapped block 3 (level 2) [ 97.635379][ T8569] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 97.635644][ T8569] EXT4-fs (loop2): 1 orphan inode deleted [ 97.635661][ T8569] EXT4-fs (loop2): 1 truncate cleaned up [ 97.717202][ T8569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.759693][ T8582] loop8: detected capacity change from 0 to 8 [ 97.775713][ T8582] Major/Minor mismatch, older Squashfs 0.-12800 filesystems are unsupported [ 97.862408][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.995557][ T8597] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1393'. [ 97.995597][ T8597] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1393'. [ 98.184905][ T8612] loop9: detected capacity change from 0 to 128 [ 98.542782][ T8633] loop8: detected capacity change from 0 to 512 [ 98.553349][ T8633] EXT4-fs (loop8): Test dummy encryption mode enabled [ 98.589524][ T8633] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.711596][ T7276] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.923173][ T4713] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 99.277482][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1421'. [ 99.946182][ T8729] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 99.950206][ T8735] loop9: detected capacity change from 0 to 512 [ 100.013015][ T8735] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.263115][ T7358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.672469][ T8775] loop8: detected capacity change from 0 to 128 [ 100.743407][ T8775] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.837215][ T7276] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.044530][ T8793] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 101.580407][ T8826] ima: policy update failed [ 101.581585][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 101.581629][ T30] audit: type=1802 audit(613.540:42): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.9.1472" res=0 errno=0 [ 101.619729][ T8831] blkio.reset_stats is deprecated [ 101.660845][ T8833] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1474'. [ 101.851402][ T8849] loop2: detected capacity change from 0 to 1024 [ 101.886243][ T8849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.903140][ T8844] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 101.985004][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.058491][ T8861] loop7: detected capacity change from 0 to 256 [ 102.122418][ T8861] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 102.122455][ T8861] FAT-fs (loop7): Filesystem has been set read-only [ 102.414899][ T8883] loop7: detected capacity change from 0 to 256 [ 102.839650][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1497'. [ 102.925998][ T8918] loop7: detected capacity change from 0 to 1024 [ 102.992806][ T4712] Bluetooth: hci2: command 0x2016 tx timeout [ 103.000067][ T8918] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.080605][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.174761][ T8932] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1504'. [ 103.174799][ T8932] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1504'. [ 103.174827][ T8932] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1504'. [ 103.332634][ T8943] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1508'. [ 103.483592][ T8958] netlink: 11 bytes leftover after parsing attributes in process `syz.9.1514'. [ 103.483632][ T8958] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1514'. [ 103.483660][ T8958] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1514'. [ 103.577136][ T8964] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1516'. [ 103.793224][ T8983] binder: 8982:8983 ioctl c018620c 20000000 returned -1 [ 103.867082][ T4718] Bluetooth: hci3: command 0x1003 tx timeout [ 103.867160][ T4713] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 103.980962][ T9003] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 103.980962][ T9003] The task syz.2.1527 (9003) triggered the difference, watch for misbehavior. [ 104.006205][ T9002] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1531'. [ 104.352087][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1537'. [ 104.490066][ T9032] process 'syz.8.1541' launched '/dev/fd/3' with NULL argv: empty string added [ 104.762284][ T9054] loop7: detected capacity change from 0 to 512 [ 104.783679][ T9054] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 104.785748][ T9054] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1549: invalid indirect mapped block 2683928664 (level 1) [ 104.785790][ T9054] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 104.788742][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 104.788756][ C0] EXT4-fs (loop7): initial error at time 616: ext4_free_branches:1023: inode 13 [ 104.788774][ C0] EXT4-fs (loop7): last error at time 616: ext4_free_branches:1023: inode 13 [ 104.798465][ T9054] EXT4-fs (loop7): 1 truncate cleaned up [ 104.800265][ T9054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.862751][ T9054] EXT4-fs (loop7): shut down requested (2) [ 104.949550][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.286204][ T9085] loop8: detected capacity change from 0 to 4096 [ 105.299924][ T9085] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.299960][ T9085] EXT4-fs (loop8): Test dummy encryption mode enabled [ 105.312053][ T9085] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 105.312125][ T9085] System zones: 0-5 [ 105.318260][ T9085] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.427625][ T7276] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.676589][ T9114] loop8: detected capacity change from 0 to 1024 [ 105.720594][ T9114] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.784688][ T9114] EXT4-fs (loop8): shut down requested (2) [ 105.843175][ T7276] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.094874][ T9145] loop9: detected capacity change from 0 to 512 [ 106.118307][ T9145] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.185436][ T9145] EXT4-fs error (device loop9): ext4_validate_inode_bitmap:107: comm syz.9.1580: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 106.204321][ T9145] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 106.283019][ T7358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.424208][ T4340] udevd[4340]: worker [4700] /devices/pci0000:00/0000:00:02.0/nvme/nvme0/nvme0n1/nvme0n1p1 is taking a long time [ 111.439130][ T9163] loop7: detected capacity change from 0 to 512 [ 111.451663][ T9163] EXT4-fs: Ignoring removed oldalloc option [ 111.454388][ T9163] EXT4-fs (loop7): Test dummy encryption mode enabled [ 111.459846][ T9163] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.473088][ T9164] netlink: 'syz.8.1589': attribute type 2 has an invalid length. [ 111.473118][ T9164] netlink: 'syz.8.1589': attribute type 1 has an invalid length. [ 111.473140][ T9164] __nla_validate_parse: 3 callbacks suppressed [ 111.473154][ T9164] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1589'. [ 111.473167][ T9164] netlink: 'syz.8.1589': attribute type 2 has an invalid length. [ 111.473179][ T9164] netlink: 'syz.8.1589': attribute type 1 has an invalid length. [ 111.473191][ T9164] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1589'. [ 111.473202][ T9164] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 111.651643][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.958901][ T9204] netlink: 'syz.7.1601': attribute type 2 has an invalid length. [ 111.958937][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1601'. [ 112.250289][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1610'. [ 113.504373][ T9293] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1624'. [ 113.508280][ T9293] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1624'. [ 113.940238][ T9320] sctp: [Deprecated]: syz.7.1633 (pid 9320) Use of int in maxseg socket option. [ 113.940238][ T9320] Use struct sctp_assoc_value instead [ 113.983873][ T9325] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 114.031233][ T9328] C: renamed from veth1_to_team (while UP) [ 114.070686][ T9328] netlink: 'syz.2.1637': attribute type 4 has an invalid length. [ 114.070724][ T9328] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1637'. [ 114.070747][ T9328] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 114.155487][ T9336] netlink: 'syz.5.1640': attribute type 2 has an invalid length. [ 114.269472][ T9345] device-mapper: ioctl: Invalid ioctl structure: name p, dev fff0 [ 114.673122][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1654'. [ 114.673156][ T9378] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1654'. [ 114.673183][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1654'. [ 115.729027][ T9462] bridge0: port 3(bond0) entered blocking state [ 115.729083][ T9462] bridge0: port 3(bond0) entered disabled state [ 115.729206][ T9462] bond0: entered allmulticast mode [ 115.729222][ T9462] bond_slave_0: entered allmulticast mode [ 115.729241][ T9462] bond_slave_1: entered allmulticast mode [ 115.741792][ T9462] bond0: entered promiscuous mode [ 115.743062][ T9462] bond_slave_0: entered promiscuous mode [ 115.744444][ T9462] bond_slave_1: entered promiscuous mode [ 115.748343][ T9462] bridge0: port 3(bond0) entered blocking state [ 115.748392][ T9462] bridge0: port 3(bond0) entered forwarding state [ 116.534920][ T9502] Injecting memory failure for pfn 0x11fd03 at process virtual address 0x20000000 [ 116.541824][ T9502] Memory failure: 0x11fd03: Sending SIGBUS to syz.8.1710:9502 due to hardware memory corruption [ 116.541882][ T9502] Memory failure: 0x11fd03: recovery action for dirty LRU page: Recovered [ 116.541920][ T9502] Injecting memory failure for pfn 0x2190ff at process virtual address 0x20001000 [ 116.541945][ T9502] Memory failure: 0x2190ff: Sending SIGBUS to syz.8.1710:9502 due to hardware memory corruption [ 116.541963][ T9502] Memory failure: 0x2190ff: recovery action for already poisoned page: Failed [ 116.759725][ T9519] loop9: detected capacity change from 0 to 256 [ 117.145360][ T9544] ip_tables: iptables: counters copy to user failed while replacing table [ 117.633490][ T9581] loop9: detected capacity change from 0 to 512 [ 117.656128][ T9585] loop2: detected capacity change from 0 to 128 [ 117.661657][ T9585] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 117.677056][ T9585] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.885430][ T4707] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.008963][ T9604] netlink: 'syz.9.1758': attribute type 2 has an invalid length. [ 118.189218][ T9615] tipc: Started in network mode [ 118.189261][ T9615] tipc: Node identity ac14140f, cluster identity 4711 [ 118.189381][ T9615] tipc: New replicast peer: 255.255.255.255 [ 118.189593][ T9615] tipc: Enabled bearer , priority 10 [ 118.358661][ T9625] loop2: detected capacity change from 0 to 1024 [ 118.364243][ T9625] EXT4-fs: Ignoring removed oldalloc option [ 118.371873][ T9625] EXT4-fs: Ignoring removed orlov option [ 118.389696][ T9625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.453062][ T9625] EXT4-fs error (device loop2): ext4_readdir:280: inode #12: block 80: comm syz.2.1768: path /: bad entry in directory: directory entry overrun - offset=296, inode=0, rec_len=1024, size=1024 fake=0 [ 118.493457][ T4707] EXT4-fs error (device loop2): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /403/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 118.507793][ T4707] EXT4-fs error (device loop2): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /403/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 118.522172][ T4707] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 118.532861][ T4707] EXT4-fs error (device loop2): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /403/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 118.548965][ T4707] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 118.553781][ T4707] EXT4-fs error (device loop2): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /403/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 118.560705][ T4707] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 118.565225][ T4707] EXT4-fs error (device loop2): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /403/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 118.571110][ T4707] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 119.009911][ T4707] bridge0: port 3(syz_tun) entered disabled state [ 119.045229][ T4707] syz_tun (unregistering): left allmulticast mode [ 119.047861][ T4707] syz_tun (unregistering): left promiscuous mode [ 119.049479][ T4707] bridge0: port 3(syz_tun) entered disabled state [ 119.158850][ T9673] Injecting memory failure for pfn 0x12188a at process virtual address 0x20000000 [ 119.161616][ T9673] Memory failure: 0x12188a: Sending SIGBUS to syz.9.1790:9673 due to hardware memory corruption [ 119.161677][ T9673] Memory failure: 0x12188a: recovery action for dirty LRU page: Recovered [ 119.200695][ T4707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 119.262187][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.328869][ T4799] tipc: Node number set to 2886997007 [ 119.438880][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.595308][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.717113][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.719383][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.721618][ T4718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.724295][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.726145][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.775413][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.931946][ T9706] usb usb9: usbfs: process 9706 (syz.7.1807) did not claim interface 3 before use [ 119.977397][ T9709] can0: slcan on ptm0. [ 119.991336][ T12] bridge_slave_1: left promiscuous mode [ 119.992957][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.048711][ T12] bridge_slave_0: left allmulticast mode [ 120.048750][ T12] bridge_slave_0: left promiscuous mode [ 120.048854][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.355503][ T9708] can0 (unregistered): slcan off ptm0. [ 120.533380][ T12] hsr_slave_0: left promiscuous mode [ 120.537293][ T12] hsr_slave_1: left promiscuous mode [ 120.537616][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.537640][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.543238][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.547126][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.574192][ T12] veth1_macvtap: left promiscuous mode [ 120.574246][ T12] veth0_macvtap: left promiscuous mode [ 120.575693][ T12] veth1_vlan: left promiscuous mode [ 120.575730][ T12] veth0_vlan: left promiscuous mode [ 121.084161][ T9759] loop8: detected capacity change from 0 to 512 [ 121.100366][ T9759] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.1823: bad orphan inode 17 [ 121.100401][ T9759] loop8: lost filesystem error report for type 5 error -117 [ 121.102730][ T9759] ext4_test_bit(bit=16, block=4) = 1 [ 121.102758][ T9759] is_bad_inode(inode)=0 [ 121.102777][ T9759] NEXT_ORPHAN(inode)=0 [ 121.102789][ T9759] max_ino=32 [ 121.102800][ T9759] i_nlink=1 [ 121.111857][ T9759] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.137659][ T12] team0 (unregistering): Port device team_slave_1 removed [ 121.155484][ T12] team0 (unregistering): Port device team_slave_0 removed [ 121.186291][ T7276] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.307833][ T12] team0 (unregistering): Port device dummy0 removed [ 121.329626][ T9741] netlink: 'syz.5.1818': attribute type 12 has an invalid length. [ 121.329691][ T9741] netlink: 'syz.5.1818': attribute type 29 has an invalid length. [ 121.329720][ T9741] __nla_validate_parse: 6 callbacks suppressed [ 121.329737][ T9741] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1818'. [ 121.330955][ T4397] 8021q: adding VLAN 0 to HW filter on device eth8 [ 121.440144][ T12] IPVS: stop unused estimator thread 0... [ 121.786803][ T4718] Bluetooth: hci2: command tx timeout [ 123.866781][ T4718] Bluetooth: hci2: command tx timeout [ 124.028096][ T4384] block nbd0: Possible stuck request 00000000aebb1899: control (read@0,4096B). Runtime 90 seconds [ 125.947501][ T4718] Bluetooth: hci2: command tx timeout [ 125.949715][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.951016][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.621233][ T9695] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.631720][ T9695] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.631872][ T9695] bridge_slave_0: entered allmulticast mode [ 126.632338][ T9695] bridge_slave_0: entered promiscuous mode [ 126.633160][ T9695] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.633191][ T9695] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.633248][ T9695] bridge_slave_1: entered allmulticast mode [ 126.633658][ T9695] bridge_slave_1: entered promiscuous mode [ 126.722383][ T9695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.723401][ T9695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.782217][ T9695] team0: Port device team_slave_0 added [ 126.791981][ T9695] team0: Port device team_slave_1 added [ 126.852471][ T9695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.854137][ T9695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.860182][ T9695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.870054][ T9695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.870086][ T9695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.870117][ T9695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.903633][ T9806] netlink: 165 bytes leftover after parsing attributes in process `syz.7.1838'. [ 126.943704][ T9695] hsr_slave_0: entered promiscuous mode [ 126.949735][ T9695] hsr_slave_1: entered promiscuous mode [ 126.953893][ T9695] debugfs: 'hsr0' already exists in 'hsr' [ 126.956333][ T9695] Cannot create hsr debugfs directory [ 127.045723][ T9813] netlink: 87 bytes leftover after parsing attributes in process `syz.7.1841'. [ 127.386750][ T9832] i2c i2c-0: Failed to register i2c client dummy at 0x1a (-16) [ 127.386796][ T9832] mt6360 0-0034: Failed to get new dummy I2C device for address 0x1a [ 127.388408][ T9832] mt6360 0-0034: probe with driver mt6360 failed with error -16 [ 127.388690][ T9832] i2c i2c-0: new_device: Instantiated device mt6360 at 0x34 [ 127.403734][ T4397] 8021q: adding VLAN 0 to HW filter on device eth9 [ 127.596539][ T9843] Injecting memory failure for pfn 0x2190ff at process virtual address 0x20289000 [ 127.596630][ T9843] Memory failure: 0x2190ff: Sending SIGBUS to syz.9.1853:9843 due to hardware memory corruption [ 127.596851][ T9843] Memory failure: 0x2190ff: recovery action for already poisoned page: Failed [ 128.027301][ T4718] Bluetooth: hci2: command tx timeout [ 128.090388][ T9875] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1862'. [ 128.118627][ T9695] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.135808][ T9695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.136176][ T9695] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.145727][ T9695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.146089][ T9695] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.167973][ T9695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.171397][ T9695] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.175671][ T9695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.369007][ T9695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.421969][ T9695] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.433034][ T4397] 8021q: adding VLAN 0 to HW filter on device eth10 [ 128.435048][ T7084] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.435095][ T7084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.454996][ T7084] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.455047][ T7084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.520430][ T9695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.198198][ T9928] bond1: Removing last ns target with arp_interval on [ 129.201941][ T9695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.573641][ T4397] 8021q: adding VLAN 0 to HW filter on device eth11 [ 129.611260][ T9695] veth0_vlan: entered promiscuous mode [ 129.631327][ T9695] veth1_vlan: entered promiscuous mode [ 129.639130][ T9961] loop9: detected capacity change from 0 to 1024 [ 129.686351][ T9695] veth0_macvtap: entered promiscuous mode [ 129.692837][ T4718] Bluetooth: hci6: unexpected cc 0x1407 length: 11 > 9 [ 129.699758][ T9695] veth1_macvtap: entered promiscuous mode [ 129.704150][ T9961] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1885'. [ 129.704191][ T9961] tipc: Invalid UDP bearer configuration [ 129.704220][ T9961] tipc: Enabling of bearer rejected, failed to enable media [ 129.746362][ T9695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.770298][ T9695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.895382][ T9974] device-mapper: ioctl: name not supplied when creating device [ 129.909458][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.909492][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.909608][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.910064][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.910168][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.910225][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.940942][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.940976][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.245176][ T9977] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 130.394006][T10004] Bluetooth: MGMT ver 1.23 [ 130.531681][T10016] loop9: detected capacity change from 0 to 1024 [ 130.539274][T10016] EXT4-fs: Ignoring removed orlov option [ 130.545606][T10016] EXT4-fs (loop9): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 130.551604][T10016] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 130.551738][T10016] EXT4-fs (loop9): orphan cleanup on readonly fs [ 130.567567][T10016] EXT4-fs error (device loop9): __ext4_get_inode_loc:4916: comm syz.9.1903: Invalid inode table block 0 in block_group 0 [ 130.571830][T10016] loop9: lost filesystem error report for type 5 error -117 [ 130.576448][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 130.576473][ C0] EXT4-fs (loop9): initial error at time 642: __ext4_get_inode_loc:4916 [ 130.576506][ C0] EXT4-fs (loop9): last error at time 642: __ext4_get_inode_loc:4916 [ 130.593362][T10016] EXT4-fs (loop9): Remounting filesystem read-only [ 130.594806][T10016] Quota error (device loop9): write_blk: dquota write failed [ 130.602097][T10016] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 130.602191][T10016] EXT4-fs (loop9): 1 truncate cleaned up [ 130.628985][T10016] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.674485][T10016] EXT4-fs (loop9): shut down requested (0) [ 130.759984][ T7358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.873845][T10034] loop8: detected capacity change from 0 to 1024 [ 130.878943][T10034] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.906101][T10034] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.047280][T10046] loop7: detected capacity change from 0 to 512 [ 131.058743][ T7276] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.094410][T10046] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.163926][T10046] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1912: corrupted xattr block 33: invalid header [ 131.167498][T10046] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1912: corrupted xattr block 33: invalid header [ 131.173640][T10046] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1912: corrupted xattr block 33: invalid header [ 131.229357][T10055] netlink: 252 bytes leftover after parsing attributes in process `syz.8.1914'. [ 131.338080][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.453359][T10073] loop9: detected capacity change from 0 to 256 [ 136.607955][T10087] netlink: 'syz.8.1924': attribute type 12 has an invalid length. [ 136.607994][T10087] netlink: 'syz.8.1924': attribute type 29 has an invalid length. [ 136.608026][T10087] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1924'. [ 136.806942][T10095] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 136.847964][T10102] netlink: 116 bytes leftover after parsing attributes in process `syz.9.1932'. [ 136.957662][T10111] team0: entered promiscuous mode [ 136.957708][T10111] team_slave_0: entered promiscuous mode [ 136.957810][T10111] team_slave_1: entered promiscuous mode [ 136.965906][T10111] macvlan2: entered promiscuous mode [ 136.972889][T10111] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.315361][T10132] loop4: detected capacity change from 0 to 256 [ 137.327540][T10132] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.616196][T10152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1949'. [ 137.691241][T10160] loop9: detected capacity change from 0 to 128 [ 137.708757][T10160] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.757616][T10163] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1956'. [ 137.774240][T10165] tps6598x 0-0003: probe with driver tps6598x failed with error -22 [ 137.774500][T10165] i2c i2c-0: new_device: Instantiated device tps25750 at 0x03 [ 137.824702][ T7358] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.935359][T10182] loop7: detected capacity change from 0 to 8 [ 138.232363][T10204] loop4: detected capacity change from 0 to 256 [ 139.330039][T10265] loop8: detected capacity change from 0 to 512 [ 139.340171][T10265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.365397][T10265] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.403505][T10275] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0 [ 139.434802][T10265] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.1986: bg 0: block 217: padding at end of block bitmap is not set [ 139.445876][T10265] EXT4-fs (loop8): Remounting filesystem read-only [ 139.523196][ T7276] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.730166][T10296] loop7: detected capacity change from 0 to 256 [ 139.777869][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1998'. [ 139.924502][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2003'. [ 139.998201][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2003'. [ 140.254918][ T865] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 140.262710][ T865] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 140.286957][ T865] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 140.811218][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2025'. [ 140.823687][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2025'. [ 141.178676][T10404] netlink: 'syz.7.2037': attribute type 12 has an invalid length. [ 141.178719][T10404] netlink: 'syz.7.2037': attribute type 29 has an invalid length. [ 141.178746][T10404] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2037'. [ 141.178762][T10404] netlink: 'syz.7.2037': attribute type 1 has an invalid length. [ 141.178774][T10404] netlink: 'syz.7.2037': attribute type 2 has an invalid length. [ 146.451931][T10433] loop9: detected capacity change from 0 to 128 [ 146.466386][T10433] EXT4-fs (loop9): Test dummy encryption mode enabled [ 146.473709][T10433] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.591536][T10433] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.700573][T10452] loop9: detected capacity change from 0 to 128 [ 146.711728][T10452] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.962202][ T7358] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.182825][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2065'. [ 147.237506][T10484] loop9: detected capacity change from 0 to 512 [ 147.240367][T10484] EXT4-fs: Ignoring removed i_version option [ 147.244069][T10484] EXT4-fs: Ignoring removed bh option [ 147.253189][T10484] EXT4-fs error (device loop9): ext4_orphan_get:1403: comm syz.9.2066: inode #13: comm syz.9.2066: iget: illegal inode # [ 147.253220][T10484] loop9: lost filesystem error report for type 5 error -117 [ 147.256253][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 147.256276][ C0] EXT4-fs (loop9): initial error at time 659: ext4_orphan_get:1403 [ 147.256307][ C0] EXT4-fs (loop9): last error at time 659: ext4_orphan_get:1403 [ 147.263051][T10484] EXT4-fs (loop9): Remounting filesystem read-only [ 147.263528][T10484] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.347343][T10484] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.545312][T10505] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2073'. [ 147.549571][T10503] i2c i2c-0: new_device: Can't parse I2C address [ 147.578872][T10505] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2073'. [ 147.689913][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2077'. [ 148.121772][T10551] loop9: detected capacity change from 0 to 512 [ 148.127299][T10551] EXT4-fs: Ignoring removed orlov option [ 148.155151][T10551] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.293267][ T7358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.538459][T10587] loop8: detected capacity change from 0 to 256 [ 148.603613][T10587] vfat: Unknown parameter 'i0²sj#PêäJTÊ /—™s4êI‚¨’' [ 148.642113][T10587] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2104'. [ 149.081115][T10621] loop4: detected capacity change from 0 to 1024 [ 149.104145][T10621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.160042][T10621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.362711][T10641] loop9: detected capacity change from 0 to 512 [ 149.391310][T10641] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.460994][ T9695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.497219][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2125'. [ 149.584133][ T7358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.617345][T10653] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 150.329899][T10693] loop7: detected capacity change from 0 to 2048 [ 150.366744][T10693] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.501142][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.738305][T10718] loop8: detected capacity change from 0 to 128 [ 150.754674][T10718] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.774367][T10715] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.837089][T10718] fscrypt (loop8, inode 12): Unsupported encryption flags (0x10) [ 150.874375][ T7276] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.942179][T10731] loop9: detected capacity change from 0 to 4096 [ 151.020614][T10731] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.025081][T10731] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.044121][T10739] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 151.103256][T10744] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2168'. [ 151.225387][T10752] Bluetooth: MGMT ver 1.23 [ 151.472043][T10765] input: syz0 as /devices/virtual/input/input5 [ 151.540588][ T12] IPVS: starting estimator thread 0... [ 151.559097][T10770] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 151.628655][ T4792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.630520][T10771] IPVS: using max 47 ests per chain, 112800 per kthread [ 151.723813][T10779] loop7: detected capacity change from 0 to 512 [ 151.752132][T10779] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.800364][T10783] loop8: detected capacity change from 0 to 4096 [ 151.803000][T10779] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 151.817636][T10783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.862356][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.895270][T10783] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 151.952315][ T7276] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 151.960372][ T7358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.974193][ T7276] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 152.009272][T10790] ip_tables: iptables: counters copy to user failed while replacing table [ 152.173848][T10799] overlayfs: failed to clone upperpath [ 152.311652][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2196'. [ 152.389276][ T2991] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.503458][T10815] loop9: detected capacity change from 0 to 128 [ 152.512457][T10815] EXT4-fs: Ignoring removed nobh option [ 152.522897][T10815] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.644281][ T7358] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.655731][ T2991] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.665136][ T4712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.679604][ T4712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.681591][ T4712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.684212][ T4712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.687691][ T4712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.860996][ T2991] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.982172][ T2991] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.133881][T10851] block2mtd: illegal erase size [ 153.152167][ T2991] bond0: left allmulticast mode [ 153.154924][ T2991] bond_slave_0: left allmulticast mode [ 153.154960][ T2991] bond_slave_1: left allmulticast mode [ 153.161819][ T2991] bond0: left promiscuous mode [ 153.164472][ T2991] bond_slave_0: left promiscuous mode [ 153.165708][ T2991] bond_slave_1: left promiscuous mode [ 153.168368][ T2991] bridge0: port 3(bond0) entered disabled state [ 153.189051][ T2991] bridge_slave_1: left allmulticast mode [ 153.191559][ T2991] bridge_slave_1: left promiscuous mode [ 153.191675][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.200896][ T2991] bridge_slave_0: left allmulticast mode [ 153.203429][ T2991] bridge_slave_0: left promiscuous mode [ 153.203544][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.269705][T10857] loop7: detected capacity change from 0 to 512 [ 153.297963][T10857] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.2215: bad orphan inode 15 [ 153.298007][T10857] loop7: lost filesystem error report for type 5 error -117 [ 153.300367][T10857] ext4_test_bit(bit=14, block=5) = 0 [ 153.300847][T10857] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.337198][T10857] EXT4-fs error (device loop7): __ext4_new_inode:1083: comm syz.7.2215: reserved inode found cleared - inode=1 [ 153.375178][T10857] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 153.420337][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.628019][ T4712] Bluetooth: hci1: command 0x0406 tx timeout [ 153.655088][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.666431][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.669390][ T2991] bond0 (unregistering): Released all slaves [ 153.682584][ T2991] bond1 (unregistering): Released all slaves [ 153.704742][T10873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2219'. [ 154.102009][ T2991] hsr_slave_0: left promiscuous mode [ 154.105113][ T2991] hsr_slave_1: left promiscuous mode [ 154.105441][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.105459][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.118513][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.118543][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.130728][ T4384] block nbd0: Possible stuck request 00000000aebb1899: control (read@0,4096B). Runtime 120 seconds [ 154.161546][ T2991] veth1_macvtap: left promiscuous mode [ 154.165503][ T2991] veth0_macvtap: left promiscuous mode [ 154.165583][ T2991] veth1_vlan: left promiscuous mode [ 154.165628][ T2991] veth0_vlan: left promiscuous mode [ 154.289818][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2233'. [ 154.515427][T10917] loop7: detected capacity change from 0 to 2048 [ 154.552919][T10917] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.612455][ T2991] team0 (unregistering): Port device team_slave_1 removed [ 154.635145][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.649638][ T2991] team0 (unregistering): Port device team_slave_0 removed [ 154.746390][ T4713] Bluetooth: hci3: command tx timeout [ 155.145331][T10945] fuse: Bad value for 'fd' [ 155.232076][T10819] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.232154][T10819] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.232252][T10819] bridge_slave_0: entered allmulticast mode [ 155.232708][T10819] bridge_slave_0: entered promiscuous mode [ 155.245240][T10819] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.250926][T10819] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.251051][T10819] bridge_slave_1: entered allmulticast mode [ 155.251516][T10819] bridge_slave_1: entered promiscuous mode [ 155.332433][T10819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.333460][T10819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.398864][T10819] team0: Port device team_slave_0 added [ 155.413544][T10819] team0: Port device team_slave_1 added [ 155.467661][T10819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.469286][T10819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.483952][T10819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.484779][T10819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.484796][T10819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.484817][T10819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.553074][T10974] xt_hashlimit: size too large, truncated to 1048576 [ 155.611694][T10819] hsr_slave_0: entered promiscuous mode [ 155.612059][T10819] hsr_slave_1: entered promiscuous mode [ 155.616456][T10819] debugfs: 'hsr0' already exists in 'hsr' [ 155.616486][T10819] Cannot create hsr debugfs directory [ 155.761214][ T4397] 8021q: adding VLAN 0 to HW filter on device eth0 [ 155.903106][ T4806] Process accounting resumed [ 155.989476][T11003] loop4: detected capacity change from 0 to 256 [ 156.059783][T10819] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.106946][ T40] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.109341][ T7084] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.109396][ T7084] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.109418][ T7084] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.195186][T10819] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.260549][T10819] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.362179][T10819] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.421286][T10819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 156.425320][T10819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 156.428265][T10819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 156.430777][T10819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 156.432741][T10819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 156.435736][T10819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 156.438516][T10819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 156.440705][T10819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 156.469157][T10819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.475272][T10819] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.480059][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.480110][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.487620][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.487664][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.826309][ T4713] Bluetooth: hci3: command tx timeout [ 158.906257][ T4713] Bluetooth: hci3: command tx timeout [ 160.986192][ T4713] Bluetooth: hci3: command tx timeout [ 161.348176][T10342] fido_id[10342]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 161.686354][T11059] binder: 11057:11059 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 161.689829][T11059] binder: 11057:11059 ioctl c0306201 200001c0 returned -22 [ 161.891586][ T4397] 8021q: adding VLAN 0 to HW filter on device eth1 [ 161.906021][T10819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.953130][T10819] veth0_vlan: entered promiscuous mode [ 162.005908][T10819] veth1_vlan: entered promiscuous mode [ 162.033083][T11077] loop7: detected capacity change from 0 to 128 [ 162.033485][T11077] EXT4-fs: Ignoring removed nobh option [ 162.041961][T11077] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.069100][T10819] veth0_macvtap: entered promiscuous mode [ 162.070504][T10819] veth1_macvtap: entered promiscuous mode [ 162.098471][T11077] fscrypt (loop7, inode 12): Reserved bits set in encryption policy [ 162.117476][T10819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.129802][T10819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.159883][ T7258] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.188524][ T7084] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.189366][ T7084] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.189403][ T7084] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.189428][ T7084] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.292960][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.292988][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.375272][ T7081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.375307][ T7081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.537803][T11098] loop0: detected capacity change from 0 to 256 [ 162.549945][T11098] vfat: Unknown parameter 'iochars²oHft\Û±H~Ä{Á©et' [ 162.669706][T11098] loop0: detected capacity change from 0 to 4096 [ 162.718333][T11098] EXT4-fs (loop0): Test dummy encryption mode enabled [ 162.722981][T11098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.823668][T10819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.873309][T11125] loop7: detected capacity change from 0 to 1024 [ 162.901886][T11125] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 162.901939][T11125] System zones: 0-1, 3-12 [ 162.902526][T11125] EXT4-fs (loop7): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.015372][ T4397] 8021q: adding VLAN 0 to HW filter on device eth2 [ 163.045906][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 163.112628][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2307'. [ 163.380913][T11159] loop0: detected capacity change from 0 to 512 [ 163.392594][T11159] EXT4-fs: Ignoring removed bh option [ 163.407394][T11159] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 163.410270][T11159] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 163.410291][T11159] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2314: Corrupt directory, running e2fsck is recommended [ 163.421974][T11159] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 163.425050][T11159] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.2314: corrupted in-inode xattr: e_name out of bounds [ 163.429095][T11159] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.429630][T11159] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2314: couldn't read orphan inode 15 (err -117) [ 163.434066][T11159] loop0: lost filesystem error report for type 5 error -117 [ 163.439000][T11159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.487975][T11159] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 163.488030][T11159] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 163.488060][T11159] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2314: Corrupt directory, running e2fsck is recommended [ 163.488261][T11159] EXT4-fs error (device loop0): ext4_readdir:280: inode #2: block 3: comm syz.0.2314: path /4/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 163.503573][T11159] EXT4-fs error (device loop0): ext4_readdir:280: inode #2: block 8: comm syz.0.2314: path /4/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 163.585801][T10819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.636006][T11174] loop9: detected capacity change from 0 to 128 [ 163.826599][T11191] loop7: detected capacity change from 0 to 128 [ 164.067216][ T4397] 8021q: adding VLAN 0 to HW filter on device eth3 [ 164.219066][T11221] loop0: detected capacity change from 0 to 512 [ 164.224584][T11221] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.2336: corrupted in-inode xattr: bad e_name length [ 164.224621][T11221] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.227680][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 164.227694][ C0] EXT4-fs (loop0): initial error at time 676: ext4_iget_extra_inode:5210: inode 15 [ 164.227713][ C0] EXT4-fs (loop0): last error at time 676: ext4_iget_extra_inode:5210: inode 15 [ 164.240645][T11221] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2336: couldn't read orphan inode 15 (err -117) [ 164.240688][T11221] loop0: lost filesystem error report for type 5 error -117 [ 164.244138][T11221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.313556][T11221] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.2336: bg 0: block 465: padding at end of block bitmap is not set [ 164.324539][T11221] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 164.338236][T11221] EXT4-fs (loop0): This should not happen!! Data will be lost [ 164.338236][T11221] [ 164.338291][T11221] EXT4-fs (loop0): Total free blocks count 0 [ 164.338311][T11221] EXT4-fs (loop0): Free/Dirty block details [ 164.338387][T11221] EXT4-fs (loop0): free_blocks=0 [ 164.338422][T11221] EXT4-fs (loop0): dirty_blocks=10 [ 164.338436][T11221] EXT4-fs (loop0): Block reservation details [ 164.338449][T11221] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 164.451935][T10819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.577297][T11237] loop0: detected capacity change from 0 to 512 [ 164.577677][T11237] EXT4-fs: Ignoring removed bh option [ 164.587940][T11237] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 164.591106][T11237] EXT4-fs (loop0): 1 truncate cleaned up [ 164.591771][T11237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.606026][T11236] loop4: detected capacity change from 0 to 512 [ 164.667543][T11243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.680752][T11243] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #15: comm syz.9.2347: corrupted xattr block 33: invalid header [ 164.683667][T11243] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #15: comm syz.9.2347: corrupted xattr block 33: invalid header [ 164.691923][T11236] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.2344: inode has both inline data and extents flags [ 164.691957][T11236] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.694890][T11236] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2344: couldn't read orphan inode 15 (err -117) [ 164.694927][T11236] loop4: lost filesystem error report for type 5 error -117 [ 164.697010][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 164.697029][ C0] EXT4-fs (loop4): initial error at time 676: ext4_orphan_get:1403: inode 15 [ 164.697054][ C0] EXT4-fs (loop4): last error at time 676: ext4_orphan_get:1408 [ 164.707947][T11236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.721698][T11243] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #15: comm syz.9.2347: corrupted xattr block 33: invalid header [ 164.782112][ T9695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.785028][T10819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.805053][T11253] EXT4-fs: Ignoring removed i_version option [ 164.858666][T11253] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.879893][T11253] EXT4-fs error (device loop7): ext4_resize_begin:60: comm syz.7.2349: resize_inode disabled but reserved GDT blocks non-zero [ 164.882670][T11253] EXT4-fs (loop7): Remounting filesystem read-only [ 164.927057][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.013481][ T7358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.117672][ T30] audit: type=1326 audit(677.071:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11265 comm="syz.7.2354" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab792a8 code=0x7ffc0000 [ 165.117719][ T30] audit: type=1326 audit(677.071:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11265 comm="syz.7.2354" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab792a8 code=0x7ffc0000 [ 165.117750][ T30] audit: type=1326 audit(677.081:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11265 comm="syz.7.2354" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9ab5c16c code=0x7ffc0000 [ 165.132200][ T30] audit: type=1326 audit(677.091:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11265 comm="syz.7.2354" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9ab5c16c code=0x7ffc0000 [ 165.136934][ T30] audit: type=1326 audit(677.101:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11265 comm="syz.7.2354" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9ab5c16c code=0x7ffc0000 [ 165.143027][ T30] audit: type=1326 audit(677.101:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11265 comm="syz.7.2354" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9ab5c16c code=0x7ffc0000 [ 165.152208][ T30] audit: type=1326 audit(677.111:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11265 comm="syz.7.2354" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9ab5c16c code=0x7ffc0000 [ 165.156915][ T30] audit: type=1326 audit(677.121:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11265 comm="syz.7.2354" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9ab5c16c code=0x7ffc0000 [ 165.162243][ T30] audit: type=1326 audit(677.121:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11265 comm="syz.7.2354" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9ab5c16c code=0x7ffc0000 [ 165.167426][ T30] audit: type=1326 audit(677.131:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11265 comm="syz.7.2354" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9ab5c16c code=0x7ffc0000 [ 165.552770][T11289] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2364'. [ 165.835896][T11303] batadv_slave_1: entered promiscuous mode [ 165.839172][T11302] batadv_slave_1: left promiscuous mode [ 166.543966][T11354] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.685230][ T7358] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.042972][T11390] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 167.043008][T11390] FAT-fs (loop0): Filesystem has been set read-only [ 167.740160][T11440] set_capacity_and_notify: 5 callbacks suppressed [ 167.789144][T11440] loop4: detected capacity change from 0 to 128 [ 167.812693][T11440] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 167.953284][ T9695] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.179424][T11465] loop4: detected capacity change from 0 to 128 [ 168.197993][T11465] EXT4-fs (loop4): Test dummy encryption mode enabled [ 168.200778][T11465] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.980971][T11491] mmap: syz.0.2438 (11491) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 169.087963][ T9695] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.623037][T11522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2453'. [ 169.885574][T11538] loop0: detected capacity change from 0 to 512 [ 169.923499][T11538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.025786][T10819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.111122][T11549] sch_fq: defrate 0 ignored. [ 170.274676][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2469'. [ 170.293215][T11563] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2471'. [ 170.293254][T11563] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2471'. [ 170.468692][ T40] Bluetooth: hci6: Frame reassembly failed (-84) [ 170.474997][T11571] Bluetooth: hci6: Frame reassembly failed (-84) [ 172.506159][ T4713] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 174.109965][ T4712] Bluetooth: hci4: command 0x0406 tx timeout [ 176.850109][T11655] loop4: detected capacity change from 0 to 8192 [ 176.914907][T11655] syz.4.2510: attempt to access beyond end of device [ 176.914907][T11655] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 176.915234][T11655] Buffer I/O error on dev loop4, logical block 57847, async page read [ 176.924868][T11655] syz.4.2510: attempt to access beyond end of device [ 176.924868][T11655] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 176.924908][T11655] Buffer I/O error on dev loop4, logical block 57847, async page read [ 176.924947][T11655] syz.4.2510: attempt to access beyond end of device [ 176.924947][T11655] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 176.924966][T11655] Buffer I/O error on dev loop4, logical block 57847, async page read [ 176.924992][T11655] syz.4.2510: attempt to access beyond end of device [ 176.924992][T11655] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 176.925007][T11655] Buffer I/O error on dev loop4, logical block 57847, async page read [ 176.925038][T11655] syz.4.2510: attempt to access beyond end of device [ 176.925038][T11655] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 176.925056][T11655] Buffer I/O error on dev loop4, logical block 57847, async page read [ 176.925079][T11655] syz.4.2510: attempt to access beyond end of device [ 176.925079][T11655] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 176.925093][T11655] Buffer I/O error on dev loop4, logical block 57847, async page read [ 176.925116][T11655] syz.4.2510: attempt to access beyond end of device [ 176.925116][T11655] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 176.925130][T11655] Buffer I/O error on dev loop4, logical block 57847, async page read [ 176.925151][T11655] syz.4.2510: attempt to access beyond end of device [ 176.925151][T11655] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 176.925166][T11655] Buffer I/O error on dev loop4, logical block 57847, async page read [ 176.925187][T11655] syz.4.2510: attempt to access beyond end of device [ 176.925187][T11655] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 176.925201][T11655] Buffer I/O error on dev loop4, logical block 57847, async page read [ 176.925222][T11655] syz.4.2510: attempt to access beyond end of device [ 176.925222][T11655] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 176.925236][T11655] Buffer I/O error on dev loop4, logical block 57847, async page read [ 177.079210][T11673] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2516'. [ 177.251133][T11684] loop9: detected capacity change from 0 to 512 [ 177.270439][T11684] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.355889][T11696] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #15: comm iou-wrk-11684: corrupted xattr block 33: invalid header [ 177.375464][T11696] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #15: comm iou-wrk-11684: corrupted xattr block 33: invalid header [ 177.379971][T11696] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #15: comm iou-wrk-11684: corrupted xattr block 33: invalid header [ 177.387462][T11691] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 177.499316][ T7358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.760283][T11719] loop9: detected capacity change from 0 to 512 [ 177.774455][T11719] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 177.779524][T11719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 177.781090][T11719] System zones: 1-12 [ 177.808467][T11719] EXT4-fs (loop9): 1 truncate cleaned up [ 177.808955][T11719] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.930167][ T7358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.230811][T11750] rnbd_client L213: map_device: Parameters missing [ 178.237536][T11752] loop9: detected capacity change from 0 to 512 [ 178.261173][T11752] EXT4-fs (loop9): Test dummy encryption mode enabled [ 178.270816][T11752] EXT4-fs (loop9): 1 truncate cleaned up [ 178.271312][T11752] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.382982][ T40] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm kworker/u8:2: bg 0: block 465: padding at end of block bitmap is not set [ 178.392844][ T40] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 178.392877][ T40] EXT4-fs (loop9): This should not happen!! Data will be lost [ 178.392877][ T40] [ 178.392901][ T40] EXT4-fs (loop9): Total free blocks count 0 [ 178.392916][ T40] EXT4-fs (loop9): Free/Dirty block details [ 178.392930][ T40] EXT4-fs (loop9): free_blocks=0 [ 178.392944][ T40] EXT4-fs (loop9): dirty_blocks=4 [ 178.392955][ T40] EXT4-fs (loop9): Block reservation details [ 178.392965][ T40] EXT4-fs (loop9): i_reserved_data_blocks=4 [ 178.408909][ T7358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.434594][T11763] loop4: detected capacity change from 0 to 4096 [ 178.447002][T11763] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.447046][T11763] EXT4-fs (loop4): Test dummy encryption mode enabled [ 178.456534][T11763] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 178.456590][T11763] System zones: 0-5 [ 178.460329][T11763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.610648][T11777] loop0: detected capacity change from 0 to 512 [ 178.614574][ T9695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.632637][T11777] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 178.672426][T11777] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.2551: invalid indirect mapped block 4294967295 (level 0) [ 178.672473][T11777] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 178.675918][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 178.675947][ C0] EXT4-fs (loop0): initial error at time 690: ext4_free_branches:1023: inode 16 [ 178.675982][ C0] EXT4-fs (loop0): last error at time 690: ext4_free_branches:1023: inode 16 [ 178.685280][T11777] EXT4-fs (loop0): Remounting filesystem read-only [ 178.685474][T11777] EXT4-fs (loop0): 1 orphan inode deleted [ 178.685491][T11777] EXT4-fs (loop0): 1 truncate cleaned up [ 178.686056][T11777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.775540][T10819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.004157][T11800] loop0: detected capacity change from 0 to 256 [ 179.029105][T11800] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.059381][T11800] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 179.059526][T11800] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 179.059558][T11800] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 179.059620][T11800] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 179.059654][T11800] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 179.059687][T11800] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 179.059718][T11800] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 179.059749][T11800] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 179.059780][T11800] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 179.059810][T11800] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 179.637526][T11823] loop7: detected capacity change from 0 to 8192 [ 179.874355][T11839] loop9: detected capacity change from 0 to 512 [ 179.885144][T11839] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.291017][T11852] loop7: detected capacity change from 0 to 4096 [ 180.304137][T11852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.337425][T11852] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2577: corrupted inode contents [ 180.344580][T11852] EXT4-fs error (device loop7): ext4_dirty_inode:6731: inode #15: comm syz.7.2577: mark_inode_dirty error [ 180.349493][T11852] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2577: corrupted inode contents [ 180.353903][T11852] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.2577: mark_inode_dirty error [ 180.357591][T11852] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2577: corrupted inode contents [ 180.361596][T11852] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.2577: mark_inode_dirty error [ 180.365525][T11852] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2577: corrupted inode contents [ 180.368298][T11852] EXT4-fs error (device loop7): ext4_truncate:4721: inode #15: comm syz.7.2577: mark_inode_dirty error [ 180.371323][T11852] EXT4-fs error (device loop7) in ext4_setattr:6247: Corrupt filesystem [ 180.383751][ T4718] Bluetooth: hci0: status 0x02 [ 180.385055][T11855] Bluetooth: hci0: Opcode 0x0c03 failed: -107 [ 180.399351][T11858] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 180.412616][T11852] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2577: corrupted inode contents [ 180.429700][T11852] EXT4-fs warning (device loop7): swap_inode_boot_loader:481: couldn't mark inode #15 dirty (err -117) [ 180.508182][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2579'. [ 180.508216][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2579'. [ 180.508239][T11862] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 180.525642][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.887541][T11884] 9p: Bad value for 'rfdno' [ 181.283092][T11912] EXT4-fs: Ignoring removed nobh option [ 181.285522][T11912] EXT4-fs: Ignoring removed bh option [ 181.314788][T11912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.341106][T11911] ªªªªªª: renamed from vlan0 [ 181.423392][T10819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.537162][T11924] lo: entered promiscuous mode [ 181.537199][T11924] lo: entered allmulticast mode [ 181.537525][T11924] bond0: entered promiscuous mode [ 181.537543][T11924] bond0: entered allmulticast mode [ 181.537968][T11924] dummy0: entered promiscuous mode [ 181.537984][T11924] dummy0: entered allmulticast mode [ 181.539166][T11924] eql: entered promiscuous mode [ 181.539187][T11924] eql: entered allmulticast mode [ 181.539305][T11924] ifb0: entered promiscuous mode [ 181.539319][T11924] ifb0: entered allmulticast mode [ 181.539500][T11924] ifb1: entered promiscuous mode [ 181.539514][T11924] ifb1: entered allmulticast mode [ 181.539706][T11924] gve 0000:00:00.0 enp0s0: entered promiscuous mode [ 181.539725][T11924] gve 0000:00:00.0 enp0s0: entered allmulticast mode [ 181.586450][T11924] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 181.586521][T11924] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 181.587518][T11924] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 181.587541][T11924] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 181.587853][T11924] hwsim0: entered promiscuous mode [ 181.587870][T11924] hwsim0: entered allmulticast mode [ 181.601937][T11924] ieee802154 phy0 wpan0: entered promiscuous mode [ 181.601972][T11924] ieee802154 phy0 wpan0: entered allmulticast mode [ 181.602135][T11924] ieee802154 phy1 wpan1: entered promiscuous mode [ 181.602150][T11924] ieee802154 phy1 wpan1: entered allmulticast mode [ 181.602307][T11924] teql0: entered promiscuous mode [ 181.602321][T11924] teql0: entered allmulticast mode [ 181.602336][T11924] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 181.648472][T11930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.687318][T11930] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.700107][T11932] misc userio: Can't change port type on an already running userio instance [ 181.814948][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.997483][T11960] set_capacity_and_notify: 3 callbacks suppressed [ 181.998851][T11960] loop0: detected capacity change from 0 to 128 [ 181.999335][T11960] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.007395][T11960] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.243601][ T4397] veth0_vlan: left promiscuous mode [ 182.289698][ T4792] veth0_vlan: entered promiscuous mode [ 182.429715][T11987] Injecting memory failure for pfn 0x138d6f at process virtual address 0x20a07000 [ 182.484112][ T4712] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 182.513309][T11987] Memory failure: 0x138d6f: Sending SIGBUS to syz.9.2625:11987 due to hardware memory corruption [ 182.524119][T11987] Memory failure: 0x138d6f: recovery action for dirty LRU page: Recovered [ 182.701625][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 182.701663][ T30] audit: type=1400 audit(694.661:145): lsm=SMACK fn=smack_inode_set_acl action=denied subject="_" object="lowerdir" requested=w pid=12000 comm="syz.5.2634" name="file1" dev="tmpfs" ino=2515 [ 182.749971][ T4806] atkbd serio2: keyboard reset failed on [ 182.814510][ T4799] kernel read not supported for file /media1 (pid: 4799 comm: kworker/0:5) [ 183.315116][T12044] nvme nvme0: resetting controller [ 183.328223][ T7081] nvme0n1: I/O Cmd(0x2) @ LBA 128, 8 blocks, I/O Error (sct 0x3 / sc 0x71) [ 183.331720][ T7081] I/O error, dev nvme0n1, sector 128 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 183.340987][ T7081] nvme 0000:00:02.0: enabling device (0000 -> 0002) [ 183.394052][ T7081] nvme nvme0: Disabling device after reset failure: -19 [ 183.435158][ T7081] Unable to handle kernel paging request at virtual address dfff800000000031 [ 183.435190][ T7081] KASAN: null-ptr-deref in range [0x0000000000000188-0x000000000000018f] [ 183.435212][ T7081] Mem abort info: [ 183.435221][ T7081] ESR = 0x0000000096000005 [ 183.435231][ T7081] EC = 0x25: DABT (current EL), IL = 32 bits [ 183.435242][ T7081] SET = 0, FnV = 0 [ 183.435250][ T7081] EA = 0, S1PTW = 0 [ 183.435258][ T7081] FSC = 0x05: level 1 translation fault [ 183.435266][ T7081] Data abort info: [ 183.435272][ T7081] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 183.435281][ T7081] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 183.435289][ T7081] GCS = 0, Overlay = 0, DirtyBit = 0 [ 183.435298][ T7081] [dfff800000000031] address between user and kernel address ranges [ 183.435381][ T7081] Internal error: Oops: 0000000096000005 [#1] SMP [ 183.449689][ T7081] Dumping ftrace buffer: [ 183.450447][ T7081] (ftrace buffer empty) [ 183.451218][ T7081] Modules linked in: [ 183.451930][ T7081] CPU: 0 UID: 0 PID: 7081 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT [ 183.453686][ T7081] Tainted: [L]=SOFTLOCKUP [ 183.454418][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 183.456220][ T7081] Workqueue: nvme-reset-wq nvme_reset_work [ 183.457241][ T7081] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 183.458491][ T7081] pc : blk_mq_complete_request_remote+0xc4/0x858 [ 183.459527][ T7081] lr : blk_mq_complete_request_remote+0x88/0x858 [ 183.460548][ T7081] sp : ffff8000979a7920 [ 183.461244][ T7081] x29: ffff8000979a79a0 x28: ffff8000979a7920 x27: 1fffe00018def44c [ 183.462626][ T7081] x26: 0000000000000001 x25: ffff0000c6f7a26e x24: dfff800000000000 [ 183.463948][ T7081] x23: ffff700012f34f24 x22: 1fffe000190af3a4 x21: ffff0000c8579d24 [ 183.465276][ T7081] x20: 000000000000018e x19: ffff0000c8579c00 x18: 0000000000038f88 [ 183.466607][ T7081] x17: 000000000004fffd x16: 000000000004fffe x15: 0000000000038f88 [ 183.467958][ T7081] x14: ffff80008a8a7000 x13: 0000000000000001 x12: 0000000000000003 [ 183.469310][ T7081] x11: ffff80008a6a6e28 x10: ffff8000885721a6 x9 : 1fffe000190af382 [ 183.470700][ T7081] x8 : 0000000000000031 x7 : 0000000000000000 x6 : 0000000000000000 [ 183.472274][ T7081] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff80008285f010 [ 183.473652][ T7081] x2 : 0000000000000000 x1 : ffff0000d8b59d80 x0 : 0000000000000000 [ 183.475022][ T7081] Call trace: [ 183.475573][ T7081] blk_mq_complete_request_remote+0xc4/0x858 (P) [ 183.476662][ T7081] nvme_poll_cq+0x544/0x1128 [ 183.477412][ T7081] nvme_dev_disable+0x384/0x540 [ 183.478211][ T7081] nvme_reset_work+0x510/0x69c [ 183.479040][ T7081] process_scheduled_works+0x91c/0x1250 [ 183.480001][ T7081] worker_thread+0x798/0xbd0 [ 183.480787][ T7081] kthread+0x304/0x3d4 [ 183.481484][ T7081] ret_from_fork+0x10/0x20 [ 183.482277][ T7081] Code: 97cf5d15 f9400288 91063914 d343fe88 (38f86908) [ 183.483460][ T7081] ---[ end trace 0000000000000000 ]--- [ 183.845475][ T7081] Kernel panic - not syncing: Oops: Fatal exception [ 183.846636][ T7081] Dumping ftrace buffer: [ 183.847384][ T7081] (ftrace buffer empty) [ 183.848146][ T7081] Kernel Offset: disabled [ 183.848930][ T7081] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 183.850133][ T7081] Memory Limit: none [ 184.214646][ T7081] Rebooting in 86400 seconds..